
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
File: lbPIfnB0hTyRg_FnosJbAuNBdIA.mft (raw, json)
Hash identifier: 5Y0FX32f2SspZkOoLP6HysP5SUGE504ivRlKz0lwZMY=
Subject key identifier: 5E:6C:09:46:2E:0B:23:E1:7C:13:FA:B4:D7:6F:96:AA:17:2D:E9:DF
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F8F7E40354F6D89DD93C0A0E22494C091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:43 +0000
Manifest this update: Thu 23 Jul 2026 15:00:43 +0000
Manifest next update: Fri 24 Jul 2026 15:00:43 +0000
Files and hashes: 1: 1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa (hash: CthKGsR5rP9kW/VUDaY/MBae0sF4z9YzQpaj0QH82Ik=)
2: 1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa (hash: smSsjE+AzeRu3/D9QdEFU+aHS0vNv5m9EyZtmYRjqZ8=)
3: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (hash: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=)
4: 3xaFim0SGUOhqh2f2EtSifTUM_c.roa (hash: O1ADycx84QWxmLprGvzt1AvfH4PGqy4iVqQ9rd+n9Ow=)
5: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (hash: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=)
6: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (hash: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=)
7: D0YcMPOnrSPV7ASIyczMje58jk0.roa (hash: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=)
8: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (hash: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=)
9: EmaHkN4PwghzXlxJKLnJoSQYQS4.roa (hash: M7GjgagdSvn/s11yZM1uY9CZiXGc766ZPfNroiq0yUw=)
10: O4NMqZLOORFev6MNDuTBAV0i9i0.roa (hash: yFb+imFb3YpJlSZCKwhYAdkCmVo6U4X0OVsZzrQhuYc=)
11: PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa (hash: AtEVBryEU+0QaV9AVKbszJgM2w291RiX7wwevVc0Kpc=)
12: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (hash: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=)
13: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (hash: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=)
14: ZNnLiyaUkDsW-jQcjbhAHKh8lPM.roa (hash: wE4gqY4aNVDXTiKJ4lZkuzt8RrFPCx2HN9rmT8v0O3A=)
15: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (hash: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=)
16: lbPIfnB0hTyRg_FnosJbAuNBdIA.crl (hash: dSpVlgcp4Zhl518qw9gd5Od7rKXqizT9AlfBlXW8y9k=)
17: pSdUwJDFDwRI9dUX1o7-AEBKFJ4.roa (hash: yf7UMs7TaL+tARugPzQ5wUgFzgFz5SS2mVJi3OrvF2s=)
18: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (hash: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=)
19: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (hash: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=)
20: tumc2U0ueawjQmyhq2TbwEHEvII.roa (hash: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=)
21: ufRes8Nqob9X-LbpoNirtnnM0Bg.roa (hash: ijVGBDbmWH17EvrwQkxNuSqhaxL0E9xhqTrvLRBfUsY=)
22: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (hash: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=)
23: yjo-DKyB6upn-q8jOq2YNWMm_7w.roa (hash: PKTXGqrxOZbFJDyMmjyPry7t1DdNVYa8O7YWz5OT3qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:40:35:4f:6d:89:dd:93:c0:a0:e2:24:94:c0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 23 15:00:43 2026 GMT
Not After : Jul 24 15:00:43 2026 GMT
Subject: CN=5e6c09462e0b23e17c13fab4d76f96aa172de9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:cc:46:f1:97:17:37:15:17:21:f8:64:fc:
4a:f5:7c:39:ad:66:36:3f:2c:e3:14:a7:79:3f:ba:
96:67:64:4d:a5:85:81:75:80:36:b4:0c:9d:41:fe:
3b:9b:dd:9a:36:20:70:84:74:52:e1:4a:95:c0:43:
38:93:60:de:55:35:e3:e1:88:13:22:01:dc:66:91:
56:7d:86:44:ae:36:60:97:3a:16:96:9f:b4:40:b1:
96:4f:90:fb:3f:9d:44:a9:13:16:8b:03:8f:ca:91:
f7:f1:e4:0d:eb:61:79:73:14:17:c1:df:df:fe:04:
ca:6a:d9:24:2f:7d:dd:d6:a7:74:e9:bc:25:15:10:
06:a2:cc:e2:f9:29:88:55:1c:35:80:b3:80:8f:ba:
f3:7d:e6:e8:06:b5:66:e9:05:cd:3a:e9:98:18:8a:
cf:3a:55:77:af:e7:ce:19:ef:8a:a3:e7:fd:3c:ba:
57:e9:2f:03:47:5c:58:f7:91:91:06:08:df:66:91:
22:bc:f8:b3:c6:7f:0f:c0:7c:e1:17:6d:71:21:7d:
8e:2f:42:a6:33:a5:7e:f8:9c:8b:6f:c8:d1:2e:b3:
f9:98:f2:24:43:ef:40:88:17:96:48:ef:d9:1a:a7:
4d:c3:ac:70:73:d9:b4:88:63:6c:83:89:1e:a6:6a:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:09:46:2E:0B:23:E1:7C:13:FA:B4:D7:6F:96:AA:17:2D:E9:DF
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:c1:00:2c:2d:e4:0a:a6:27:f6:34:3f:bf:66:f5:90:04:
42:38:02:ed:b0:be:f2:e1:47:4d:41:96:2a:c5:e8:eb:57:ad:
38:11:d9:64:9c:dc:6d:77:d4:38:1d:92:2e:29:b4:bf:a1:85:
56:f0:44:20:cd:e1:c4:c7:90:0c:6f:cf:06:f1:06:1c:86:0e:
9e:33:3c:b4:27:42:59:43:55:fd:eb:b7:a4:aa:1f:a7:19:25:
a3:36:2d:a1:ca:2e:f7:3b:bd:92:81:32:51:e7:67:fc:c1:5c:
4e:66:39:2b:77:56:91:73:8c:88:0b:c5:b7:4a:3a:46:5e:bc:
ec:5d:25:85:df:19:32:33:5d:f5:ce:e6:93:d1:d8:4d:d0:25:
8e:cc:58:1d:c9:cc:e7:7b:0c:37:33:09:3d:59:3f:88:fe:9f:
b2:c5:9a:bf:d7:ed:10:b3:7e:02:15:3a:60:15:02:d2:fa:d3:
3c:3a:ef:64:b2:2e:1b:1a:20:3f:de:96:16:f0:f4:6b:a6:62:
3e:f4:19:ac:3d:39:1a:ed:ed:6f:50:3b:34:5c:e6:9d:d4:d3:
fa:d4:e0:4c:5c:57:dd:24:12:28:4d:ee:f6:c9:2a:f0:ea:c4:
88:db:83:23:87:ef:cb:77:63:b6:9c:72:5c:5c:62:35:02:7c:
83:62:e7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:07 2026 by rpki-client